$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: v3u6na2E+CJetBGBQPp0lVElmm4gECkh6RlbjToiwuo= Subject key identifier: 6F:EF:5A:9C:56:86:70:5F:78:7F:E4:AA:B2:57:B6:D5:A3:AB:FC:D8 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019D284DD46E1C7EFBCCE084A87D3293F9AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 1828 Signing time: Thu 26 Mar 2026 04:01:22 +0000 Manifest this update: Thu 26 Mar 2026 04:01:22 +0000 Manifest next update: Fri 27 Mar 2026 04:01:22 +0000 Files and hashes: 1: 0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa (hash: bxo9OIZoi8IN/fQL03vCLDxAyd4172KoQ8X8ciK25Oc=) 2: 1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa (hash: d7SmTyDFUP/oRw3phzJwlnO6V1d5N7DrOlrvStN61JU=) 3: 5IBvYreu6crx1ZEw8lgWXelcFW4.roa (hash: QsG1NiQkvSH7jCRwmv7r4phufcd3rAtf4NV7t9+hYtM=) 4: 6ItGULV6j8ktSiDJcisut4L2uv8.roa (hash: AVoyJJSbMIzWkWm7Zhb8Q8AM52J+C55gsBmt2DwDqHk=) 5: 7VcC4DMXIHbrZKPirD4v2PDxiTo.roa (hash: 1QvS1I6O1u7fOlkBKmW3HFU8tJj8BM1PL1GfKM5aNaI=) 6: 8GnAqPanEF-aLifFEt28x_W5bDA.roa (hash: MVg0h+oZbG/5iMupvC5wE+JQeAtDrUL1XBd2HQzTeWA=) 7: 8azUINAdDrKjSOMgy-JPOT73XRM.roa (hash: ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=) 8: ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa (hash: 383sYSfBGHsf/cXc3Wodn3yKNQGJap1/pbI6fLtIstw=) 9: MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa (hash: rK/554OfUglfPeqEoYZ9XaLl/qaRXFUHRWwU799kKDU=) 10: UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa (hash: f9lP8pXxVTYPvjjr2VNmvzkO+lSuR++Kin/e+V01V5k=) 11: Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa (hash: Yj3I6/Qycmom0mdi7MnamZ5gOAsgybPCnXXKUt6eniM=) 12: WZU6FHFcHOx5fALoZimlHMooRJs.roa (hash: WpBGTEqhwHqD6YFmMFq/AcUePkWzvyP/nRmAiQbyO2E=) 13: dtGYKYc-L-yIv33hN65J3E-xajc.roa (hash: HGuRzP1yH6WASdpAyJlfci6458TQEkYZy6WuynkrmB8=) 14: e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa (hash: GwJtd77us9EwOJjzXsDviq2QYdc35X858cXyCikITTk=) 15: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: 1bFWvcZJJHEZXR99SnOTEJD9hKqpaaLfc9U3TLYiPZY=) 16: j8jqNDQZMqmi7QKl4s3v-vmRycc.roa (hash: EOZ1DSZzBL0cAYGwCaI3yGpoFvzn4nYkcA9KkiSGjio=) 17: nckzlZzEmCkRBssdIu4EBS5Mv74.roa (hash: eV7W/koRLQxtO7S8b9s+wve0BYE3rm3ca63LW1DOzxw=) 18: xUsfdtgD1j1T7j6n66HdbJOfPDs.roa (hash: U4IhStPfUvQ+RWTW7WTK40Ox8axplO5trMxYdWn3hz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4d:d4:6e:1c:7e:fb:cc:e0:84:a8:7d:32:93:f9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Mar 26 04:01:22 2026 GMT Not After : Mar 27 04:01:22 2026 GMT Subject: CN=6fef5a9c5686705f787fe4aab257b6d5a3abfcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:bf:b1:e9:3b:a5:cd:ef:ea:b3:89:d0:e6: 8e:4b:df:f3:cb:68:4a:c6:81:7f:92:cf:52:2a:cb: 2f:e1:b9:a2:ba:9a:bc:fd:0b:27:3c:f3:c3:9b:5e: c5:b8:5d:cf:90:4c:cb:79:d3:70:52:2f:a4:49:7f: bb:6c:a4:ec:49:e9:c5:21:9d:8d:5a:bc:db:e7:ce: 8c:23:e1:c4:42:53:62:49:c5:0a:d9:1b:c1:68:2f: eb:b9:4a:d0:38:a3:94:0e:83:c7:73:13:76:60:9b: 9c:ed:0c:e8:3b:5c:74:b5:89:6c:db:82:6e:43:5d: a0:02:43:06:b6:8f:4a:a7:35:fe:74:13:32:8e:a3: e2:e0:cc:22:d8:15:46:44:35:5a:3b:0d:1b:b0:93: 8d:c3:3b:99:f4:24:16:34:95:b4:92:59:02:be:c2: b0:55:22:72:ae:7b:41:b1:05:a3:de:09:5b:aa:e0: 06:45:c6:76:16:6c:f9:5a:f2:ad:ed:8c:1d:03:6f: 4b:1d:06:0b:03:b2:b5:c6:8f:fb:b1:ab:8f:d8:9b: 8d:6d:dc:99:d9:2f:a3:02:dc:c3:db:ae:8d:85:2d: ad:1d:6f:cc:15:8e:80:41:1b:35:69:66:80:5c:31: 5f:19:33:ec:67:75:66:d3:47:2f:6a:42:00:79:fa: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EF:5A:9C:56:86:70:5F:78:7F:E4:AA:B2:57:B6:D5:A3:AB:FC:D8 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:35:ed:07:aa:1b:fa:89:be:20:dd:b2:3b:7e:79:3b:15:a3: 91:8a:1d:66:8e:0f:0e:1b:2b:8c:ef:19:3b:8d:63:de:25:09: 15:92:1b:4f:2e:e2:1e:70:30:10:e8:96:46:8b:f9:eb:43:cf: b4:5a:fd:ca:08:9a:37:12:a4:ee:07:8f:9a:3c:e1:59:49:8a: a9:cf:f0:bc:e1:ff:6d:57:37:80:4b:e4:25:d0:9e:a8:8c:84: 8e:b8:ee:fa:ef:1c:c9:b1:fa:b9:d8:28:e8:27:5e:1d:ce:8c: a2:d1:2b:c3:d8:4b:f5:e3:7b:7d:e9:b9:00:9a:fd:cc:6d:d6: 57:80:fe:9b:7d:61:b6:ae:bc:01:2b:97:e0:72:8a:87:0b:c9: 91:48:09:c1:65:7b:98:50:a0:9e:99:5c:2e:f0:f1:78:31:4a: d3:28:51:30:77:c7:55:e0:f6:90:0c:4f:6e:10:7a:39:1c:66: 23:77:7e:54:36:48:11:30:cb:36:04:bc:53:29:a5:b7:7c:0f: e2:c4:74:99:54:70:67:c1:19:11:6f:50:0f:45:57:3f:67:df: b8:f9:27:9d:51:f4:28:07:bf:7e:58:24:88:b7:94:e0:80:a8: f8:ed:8f:65:12:58:20:ec:4a:e4:e7:5e:2a:88:e1:6f:95:3e: eb:76:9e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oTdRuHH77zOCEqH0yk/mrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMzI2MDQwMTIyWhcNMjYwMzI3MDQwMTIyWjAzMTEwLwYDVQQD Eyg2ZmVmNWE5YzU2ODY3MDVmNzg3ZmU0YWFiMjU3YjZkNWEzYWJmY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEq/sek7pc3v6rOJ0OaOS9/zy2hK xoF/ks9SKssv4bmiupq8/QsnPPPDm17FuF3PkEzLedNwUi+kSX+7bKTsSenFIZ2N Wrzb586MI+HEQlNiScUK2RvBaC/ruUrQOKOUDoPHcxN2YJuc7QzoO1x0tYls24Ju Q12gAkMGto9KpzX+dBMyjqPi4Mwi2BVGRDVaOw0bsJONwzuZ9CQWNJW0klkCvsKw VSJyrntBsQWj3glbquAGRcZ2Fmz5WvKt7YwdA29LHQYLA7K1xo/7sauP2JuNbdyZ 2S+jAtzD266NhS2tHW/MFY6AQRs1aWaAXDFfGTPsZ3Vm00cvakIAefq9IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/vWpxWhnBfeH/kqrJXttWjq/zYMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDXtB6ob +om+IN2yO355OxWjkYodZo4PDhsrjO8ZO41j3iUJFZIbTy7iHnAwEOiWRov560PP tFr9ygiaNxKk7gePmjzhWUmKqc/wvOH/bVc3gEvkJdCeqIyEjrju+u8cybH6udgo 6CdeHc6MotErw9hL9eN7fem5AJr9zG3WV4D+m31htq68ASuX4HKKhwvJkUgJwWV7 mFCgnplcLvDxeDFK0yhRMHfHVeD2kAxPbhB6ORxmI3d+VDZIETDLNgS8Uymlt3wP 4sR0mVRwZ8EZEW9QD0VXP2ffuPknnVH0KAe/flgkiLeU4ICo+O2PZRJYIOxK5Ode Kojhb5U+63ae+A== -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:44 2026 by rpki-client